This news roundup describes real social-engineering operations where attackers impersonate trusted support teams to trick people into giving up secrets. One campaign uses email/SMS/WhatsApp plus AI voice calls pretending to be Apple Support to steal iPhone passcodes, while another uses phishing emails posing as an organization’s IT help desk to deliver malware that shows a fake Windows lock screen to capture passwords.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this: your iPhone goes missing, and minutes later “Apple Support” is calling, texting, and WhatsApping you at the same time. That’s AnonyMousKIT, a phishing-as-a-service platform that impersonates Apple Support by email, SMS, WhatsApp, and AI voice calls, convincing people to read out their iPhone passcode so stolen phones can be wiped, unlocked, and resold. There’s a cousin to this: SynkLoader arrives as a fake IT help desk email from a lookalike Microsoft 365 tenant, then pops up a fake Windows lock screen that says “enter your password to unlock” and quietly steals it. Here’s the rule: if anyone, Apple, IT, anyone, asks for a passcode or password, stop and report it to our security team immediately through our normal reporting channel.
The bulletin describes real-world social engineering where staff were tricked into disclosing sensitive data or access. In one case, Revolut employees responded to fraudulent information requests sent from a real government-domain email account, exposing extensive customer records. Separately,…
This roundup describes several real-world social-engineering and human-abuse techniques, including trojanized “installer” lures (ClickFix), large-scale phone-based investment fraud, and stalkers misusing Chrome Sync after brief physical access. The items include clear workflows that can be turned…
Microsoft described two real-world campaigns: an invoice fraud blast impersonating executives to trick finance teams into ACH payments, and a passkey-themed helpdesk scam that steals or bypasses authentication to take over Microsoft cloud accounts. In the second campaign, victims are called or…
Microsoft reports active intrusions where attackers trick employees with “passkey/SSO update” helpdesk pretexts delivered by phone, SMS, or even Microsoft Teams. Victims are sent to lookalike Microsoft sign-in pages or guided through device-code sign-in, letting attackers capture session access and…
This bulletin describes multiple real-world social engineering campaigns where attackers impersonate IT support or use trusted-looking sharing and “Allow” prompts to gain access. Several campaigns abuse Microsoft Teams and document-sharing lures to trick employees into installing remote tools or…
Researchers say a phishing-as-a-service platform called AnonyMousKIT targets people who recently lost or had an iPhone stolen by pretending to be “Apple Support.” The operation uses email/SMS/WhatsApp and AI-assisted voice calls to convince victims to share their iPhone passcode and follow a…
